ci2 starts bisection 2023-07-28 15:24:32.82348697 +0000 UTC m=+94732.593186263 bisecting fixing commit since 60662882b7bd3def130b5bb5d27ab55848d284e7 building syzkaller on 76decb8275c764d309b8daf5ab9dc573b2411ddf ensuring issue is reproducible on original commit 60662882b7bd3def130b5bb5d27ab55848d284e7 testing commit 60662882b7bd3def130b5bb5d27ab55848d284e7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 99f36beee55b2350dd23473ebb117e57e02fea8d5047b47fca68fcf452f49970 all runs: crashed: kernel BUG in submit_bh_wbc representative crash: kernel BUG in submit_bh_wbc, types: [BUG] check whether we can drop unnecessary instrumentation disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed testing commit 60662882b7bd3def130b5bb5d27ab55848d284e7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 815a302c344f6472d276b1996b7e9602eaaac33fa09fc29a8fb9863b86f87073 all runs: crashed: kernel BUG in submit_bh_wbc representative crash: kernel BUG in submit_bh_wbc, types: [BUG] the bug reproduces without the instrumentation disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed kconfig minimization: base=5179 full=6523 leaves diff=250 split chunks (needed=false): <250> split chunk #0 of len 250 into 5 parts testing without sub-chunk 1/5 disabling configs for [HANG LEAK UBSAN KASAN LOCKDEP ATOMIC_SLEEP], they are not needed testing commit 60662882b7bd3def130b5bb5d27ab55848d284e7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: ed5b0f2dbc286fd37473c38707f536f244a0e6de5ccfb8f1644697538836031e all runs: crashed: kernel BUG in submit_bh_wbc representative crash: kernel BUG in submit_bh_wbc, types: [BUG] the chunk can be dropped testing without sub-chunk 2/5 disabling configs for [LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN KASAN], they are not needed testing commit 60662882b7bd3def130b5bb5d27ab55848d284e7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 2ccf54c0c47c08b08c1c2fcf865ed26b68e768e98868a7426a22ef566486ab8d all runs: crashed: kernel BUG in submit_bh_wbc representative crash: kernel BUG in submit_bh_wbc, types: [BUG] the chunk can be dropped testing without sub-chunk 3/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 60662882b7bd3def130b5bb5d27ab55848d284e7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 697a1728a0c316e5a5996d4a8d08ba16f6308e0b4cfb36ff2c85abaf9c076737 all runs: crashed: kernel BUG in submit_bh_wbc representative crash: kernel BUG in submit_bh_wbc, types: [BUG] the chunk can be dropped testing without sub-chunk 4/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 60662882b7bd3def130b5bb5d27ab55848d284e7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 127f918e54cdeb07b932bb1266df742c90a6a327ba62499091e0c2f6362ca59c all runs: crashed: kernel BUG in submit_bh_wbc representative crash: kernel BUG in submit_bh_wbc, types: [BUG] the chunk can be dropped testing without sub-chunk 5/5 disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing commit 60662882b7bd3def130b5bb5d27ab55848d284e7 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 failed building 60662882b7bd3def130b5bb5d27ab55848d284e7: net/socket.c:1225: undefined reference to `wext_handle_ioctl' net/socket.c:3420: undefined reference to `compat_wext_handle_ioctl' net/core/net-procfs.c:329: undefined reference to `wext_proc_init' net/core/net-procfs.c:345: undefined reference to `wext_proc_exit' minimized to 50 configs; suspects: [HID_ZEROPLUS USB_NET_CDC_MBIM USB_NET_CDC_SUBSET USB_NET_CDC_SUBSET_ENABLE USB_NET_DM9601 USB_NET_GL620A USB_NET_MCS7830 USB_NET_NET1080 USB_NET_PLUSB USB_NET_RNDIS_HOST USB_NET_SMSC75XX USB_NET_SMSC95XX USB_NET_SR9700 USB_NET_SR9800 USB_NET_ZAURUS USB_OHCI_HCD USB_OHCI_HCD_PCI USB_OHCI_HCD_PLATFORM USB_OTG USB_OTG_FSM USB_PRINTER USB_SERIAL_GENERIC USB_SERIAL_PL2303 USB_STORAGE_ALAUDA USB_STORAGE_CYPRESS_ATACB USB_STORAGE_DATAFAB USB_STORAGE_FREECOM USB_STORAGE_ISD200 USB_STORAGE_JUMPSHOT USB_STORAGE_KARMA USB_STORAGE_ONETOUCH USB_STORAGE_SDDR09 USB_STORAGE_SDDR55 USB_STORAGE_USBAT USB_TRANCEVIBRATOR USB_U_AUDIO USB_U_ETHER USB_U_SERIAL USB_WDM WLAN WLAN_VENDOR_ATH WLAN_VENDOR_ATMEL WLAN_VENDOR_BROADCOM WLAN_VENDOR_INTERSIL WLAN_VENDOR_MARVELL WLAN_VENDOR_MEDIATEK WLAN_VENDOR_MICROCHIP WLAN_VENDOR_PURELIFI WLAN_VENDOR_RALINK WLAN_VENDOR_REALTEK WLAN_VENDOR_RSI WLAN_VENDOR_SILABS WLAN_VENDOR_ZYDAS X86_X32_ABI ZEROPLUS_FF] disabling configs for [KASAN LOCKDEP ATOMIC_SLEEP HANG LEAK UBSAN], they are not needed testing current HEAD d3b37a712ab7a5d73a2c66156debe2e3d48df007 testing commit d3b37a712ab7a5d73a2c66156debe2e3d48df007 gcc compiler: Debian clang version 15.0.6, GNU ld (GNU Binutils for Debian) 2.40 kernel signature: 16e0b75115ad6b0b6f9ee6abd939ad5e8176279e2a9aa50250523fc800b9043e all runs: crashed: kernel BUG in submit_bh_wbc representative crash: kernel BUG in submit_bh_wbc, types: [BUG] crash still not fixed/happens on the oldest tested release revisions tested: 7, total time: 1h2m38.773687487s (build: 39m7.655875061s, test: 20m19.663706625s) crash still not fixed on HEAD or HEAD had kernel test errors commit msg: BACKPORT: FROMGIT: irqchip/gic-v3: Workaround for GIC-700 erratum 2941627 crash: kernel BUG in submit_bh_wbc fscrypt: AES-256-XTS using implementation "xts-aes-aesni" ------------[ cut here ]------------ kernel BUG at fs/buffer.c:2717! invalid opcode: 0000 [#1] PREEMPT SMP CPU: 0 PID: 353 Comm: syz-executor.0 Not tainted 6.1.25-syzkaller #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 RIP: 0010:submit_bh_wbc+0x13d/0x150 fs/buffer.c:2717 Code: 72 26 00 48 8b 73 10 48 8b 53 20 4c 89 f7 e8 ba d6 fe ff 4c 89 ff e8 82 7c 24 00 5b 41 5e 41 5f 5d c3 0f 0b 0f 0b 0f 0b 0f 0b <0f> 0b 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 RSP: 0018:ffffc9000077f888 EFLAGS: 00010206 RAX: ffffffff81439db0 RBX: ffff88810da94340 RCX: 0000000000000002 RDX: 0000000000000000 RSI: ffff88810da94340 RDI: 0000000000000000 RBP: ffffc9000077f8a0 R08: 00000003fffffffc R09: 0000000000000402 R10: 0000000000000008 R11: 0000000000001097 R12: 0000000000000000 R13: ffffea0004546000 R14: 0000000000000000 R15: 0000000000000001 FS: 00007fd6d1b0c6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002000a000 CR3: 0000000112bf4000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: submit_bh+0xb/0x10 fs/buffer.c:2755 __ext4_read_bh fs/ext4/super.c:175 [inline] ext4_read_bh+0x5b/0x80 fs/ext4/super.c:199 ext4_read_bh_lock+0x34/0x90 fs/ext4/super.c:214 __ext4_block_zero_page_range fs/ext4/inode.c:3786 [inline] ext4_block_zero_page_range+0x19c/0x360 fs/ext4/inode.c:3853 ext4_block_truncate_page fs/ext4/inode.c:3877 [inline] ext4_truncate+0x263/0x440 fs/ext4/inode.c:4254 ext4_truncate_failed_write fs/ext4/truncate.h:22 [inline] ext4_write_begin+0x479/0x610 fs/ext4/inode.c:1263 ext4_da_write_begin+0x21d/0x2c0 fs/ext4/inode.c:2987 generic_perform_write+0x95/0x1f0 mm/filemap.c:3765 ext4_buffered_write_iter+0xf7/0x190 fs/ext4/file.c:285 ext4_file_write_iter+0x2c2/0x7e0 do_iter_write+0x1cd/0x2d0 fs/read_write.c:861 vfs_iter_write+0x14/0x20 fs/read_write.c:902 iter_file_splice_write+0x279/0x420 fs/splice.c:686 do_splice_from fs/splice.c:764 [inline] direct_splice_actor+0x29/0x40 fs/splice.c:931 splice_direct_to_actor+0x143/0x2b0 fs/splice.c:886 do_splice_direct+0x7f/0xc0 fs/splice.c:974 do_sendfile+0x262/0x400 fs/read_write.c:1255 __do_sys_sendfile64 fs/read_write.c:1323 [inline] __se_sys_sendfile64 fs/read_write.c:1309 [inline] __x64_sys_sendfile64+0x93/0xc0 fs/read_write.c:1309 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x3d/0xb0 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x7fd6d0e7c919 Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 RSP: 002b:00007fd6d1b0c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 RAX: ffffffffffffffda RBX: 00007fd6d0f9bf80 RCX: 00007fd6d0e7c919 RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 RBP: 00007fd6d0ed8c94 R08: 0000000000000000 R09: 0000000000000000 R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000000 R13: 000000000000000b R14: 00007fd6d0f9bf80 R15: 00007ffe7a67e068 Modules linked in: ---[ end trace 0000000000000000 ]--- RIP: 0010:submit_bh_wbc+0x13d/0x150 fs/buffer.c:2717 Code: 72 26 00 48 8b 73 10 48 8b 53 20 4c 89 f7 e8 ba d6 fe ff 4c 89 ff e8 82 7c 24 00 5b 41 5e 41 5f 5d c3 0f 0b 0f 0b 0f 0b 0f 0b <0f> 0b 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 55 48 89 RSP: 0018:ffffc9000077f888 EFLAGS: 00010206 RAX: ffffffff81439db0 RBX: ffff88810da94340 RCX: 0000000000000002 RDX: 0000000000000000 RSI: ffff88810da94340 RDI: 0000000000000000 RBP: ffffc9000077f8a0 R08: 00000003fffffffc R09: 0000000000000402 R10: 0000000000000008 R11: 0000000000001097 R12: 0000000000000000 R13: ffffea0004546000 R14: 0000000000000000 R15: 0000000000000001 FS: 00007fd6d1b0c6c0(0000) GS:ffff888237c00000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 000000002000a000 CR3: 0000000112bf4000 CR4: 00000000003506b0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400